Re:You can link an OpenPGP key to a German eID
by hannob on Wednesday May 31, 2023 @04:00PM
(#36143425)
Yeah, I can use PGP to encrypt e-mail, with all the problems that come with it. However... I don't need a signature from governikus to do this.
[ Parent
| on HN ]
Re:You can link an OpenPGP key to a German eID
by Zemtomo on Wednesday May 31, 2023 @05:14PM
(#36144419)
It becomes an official communication method.
This should allow you to actually send legal save communication to the government.
Re:You can link an OpenPGP key to a German eID
by germanier on Wednesday May 31, 2023 @05:42PM
(#36144731)
There is no special legal status attached to that.
Actual electronic signatures recognized by law are not based on GPG.
Re:You can link an OpenPGP key to a German eID
by Zemtomo on Thursday June 01, 2023 @02:47AM
(#36148232)
Isn't that a page from Germany?
Using your eID?
Do you know this or do you assume this?
Re:You can link an OpenPGP key to a German eID
by germanier on Thursday June 01, 2023 @03:04AM
(#36148319)
Yes, my statements are about the legal reality I Germany.
GPG signatures convey no special legal status above regular email even if the key is signed by a government-owned company that verified your eID.
Re:You can link an OpenPGP key to a German eID
by Zemtomo on Thursday June 01, 2023 @04:35AM
(#36148762)
I read it differently.
But let's see how it is currently reading this can become the defacto standard.
And technically it's a good workflow/choice
Re:You can link an OpenPGP key to a German eID
by germanier on Thursday June 01, 2023 @07:35AM
(#36149802)
That service is not new. And nobody seriously considers adopting GPG for that, as it's has serious design flaws.
Re:You can link an OpenPGP key to a German eID
by Zemtomo on Thursday June 01, 2023 @12:00PM
(#36153052)
What design flaw?
Re:You can link an OpenPGP key to a German eID
by germanier on Thursday June 01, 2023 @12:04PM
(#36153122)
My mother would not be able to keep her private key secure.
Re:You can link an OpenPGP key to a German eID
by Zemtomo on Thursday June 01, 2023 @05:09PM
(#36157373)
But that's not the point.
This would even allow companies to offer this for you because the only interface necessary is the key
Re:You can link an OpenPGP key to a German eID
by madsr on Thursday June 01, 2023 @03:43AM
(#36148498)
If your PGP key isn't signed by anyone, then there's no way to verify that it's really you - other than contacting you and checking the fingerprint.
By having a trusted third party such as Governikus sign it, anyone can verify instantly that _this_ PGP key is actually from a person with a _name_ for which they also have a government ID with that exact name.
I can envision a _lot_ of use cases for having your name publicly recognized by a trusted party.